Gnome vulnerabilities

Products

• Libsoup 36
• Glib 33
• Libxml2 28
• Evolution 21
• Gdk-pixbuf 21
• Epiphany 17
• Gdm 16
• Gtk 15
• Gimp 12
• Networkmanager 12
• Gdkpixbuf 11
• Gnome-shell 11
• Screensaver 11
• Display Manager 10
• Gvfs 10
• Librsvg 10
• Evince 7
• Pango 6
• Gpdf 5
• Libcroco 5
• Evolution-data-server 4
• Gnumeric 4
• Libgsf 4
• Libgxps 4
• Malcontent 4
• Nautilus 4
• Balsa 3
• Dia 3
• File-roller 3
• Gthumb 3
• Gtk-vnc 3
• Libxslt 3
• Localsearch 3
• Yelp 3
• Control Center 2
• Dwarf Http Server 2
• Ekiga 2
• Empathy 2
• Eog 2
• Evolution Data Server 2

Show 16 moreShow less

• Gcab 2
• Gedit 2
• Gnome-autoar 2
• Gnome-keyring 2
• Keyring 2
• Online Accounts 2
• Gnome-remote-desktop 2
• Gnome-terminal 2
• Gtkhtml 2
• Libgtop Daemon 2
• Librest 2
• Libsocialweb 2
• Networkmanager-vpnc 2
• Power Manager 2
• Rhythmbox 2
• Shotwell 2

Newest

• gnome epiphany epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install CVE-2026-118599 Fix available 5.5 MediumOctober 31, 2026
• gnome epiphany epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access CVE-2026-118598 Fix available 6.5 MediumOctober 31, 2026
• gnome epiphany epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler CVE-2026-115683 Fix available 6.8 MediumOctober 30, 2026
• gnome libgsf GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow CVE-2026-116124 5.3 MediumOctober 26, 2026
• gnome libgxps GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element CVE-2026-111132 6.9 MediumOctober 15, 2026
• gnome evolution-data-server, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Evolution-data-server: local file disclosure via attach file:// uris CVE-2026-110777 5.7 MediumOctober 14, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 more Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth CVE-2026-102560 Fix available 8.6 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more Libsoup: libsoup: heap buffer overflow during websocket client-frame masking CVE-2026-102559 Fix available 8.6 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth CVE-2026-102558 Fix available 8.6 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 more Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding CVE-2026-102555 Fix available 8.2 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more Libsoup: libsoup: heap buffer overflow during websocket message reassembly CVE-2026-102557 Fix available 8.6 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion CVE-2026-102556 Fix available 8.6 HighSeptember 29, 2026
• [unknown] networkmanager-vpnc Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection CVE-2026-91841 7.8 HighSeptember 25, 2026
• [unknown] networkmanager-vpnc Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username CVE-2026-91840 7.8 HighSeptember 25, 2026
• gnome networkmanager-fortisslvpn Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to root via crlf injection in vpn profile credentials CVE-2026-91839 7.8 HighSeptember 25, 2026
• gnome networkmanager-sstp Networkmanager-sstp: networkmanager-sstp: local privilege escalation to root via shell injection in vpn profile fields CVE-2026-91838 7.8 HighSeptember 25, 2026
• gnome networkmanager-iodine Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injection CVE-2026-91837 7.8 HighSeptember 25, 2026
• gnome gnumeric Gnumeric: gnumeric: heap use-after-free when opening a malformed workbook CVE-2026-97222 Fix available 5.5 MediumSeptember 25, 2026
• gnome gimp, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Gimp: integer overflow when generating a thumbnail preview for a psd file CVE-2026-92248 Fix available 7.8 HighSeptember 15, 2026
• [unknown] gvfs, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 more Gvfs: gvfs-admin socket ownership race permits local root CVE-2026-88924 Fix available 7.0 HighSeptember 10, 2026
• gnome libxml2 In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not... CVE-2026-86144 Fix available 5.6 MediumSeptember 5, 2026
• gnome libxml2 In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse... CVE-2026-86143 Fix available 6.9 MediumSeptember 5, 2026
• gnome libxml2 In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of... CVE-2026-86142 Fix available 6.9 MediumSeptember 5, 2026
• gnome libxml2 xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a... CVE-2026-86141 Fix available 2.9 LowSeptember 5, 2026
• gnome libxml2 In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. CVE-2026-86140 Fix available 8.0 HighSeptember 5, 2026
• gnome libxml2 In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. CVE-2026-86139 Fix available 6.9 MediumSeptember 5, 2026
• gnome libxml2 In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap... CVE-2026-86138 Fix available 6.9 MediumSeptember 5, 2026
• gnome libxml2 In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds... CVE-2026-86137 Fix available 2.9 LowSeptember 5, 2026
• [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Gvfs: mtp: out-of-bounds read in do_read() CVE-2026-84270 Fix available 4.3 MediumSeptember 1, 2026
• [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Gvfs: afp: heap-based buffer overflow in dsi read path CVE-2026-84269 Fix available 6.5 MediumSeptember 1, 2026
• [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Gvfs: sftp: uninitialized heap disclosure in read_string() CVE-2026-84267 Fix available 4.3 MediumSeptember 1, 2026
• [unknown] gvfs, red hat enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 more Gvfs: sftp: heap-based buffer overflow in read_reply() CVE-2026-84268 Fix available 8.8 HighSeptember 1, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling CVE-2026-82343 Fix available 6.1 MediumAugust 28, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check CVE-2026-82330 Fix available 6.1 MediumAugust 28, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count CVE-2026-82328 Fix available 6.1 MediumAugust 28, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 CVE-2026-82324 Fix available 6.1 MediumAugust 28, 2026
• gnome dia Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index CVE-2026-77652 7.8 HighAugust 26, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 more Gimp: stack vla size underflow denial of service in seattle CVE-2026-79902 Fix available 5.5 MediumAugust 26, 2026
• gnome dia Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files CVE-2026-77658 7.8 HighAugust 26, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation CVE-2026-80101 Fix available 4.4 MediumAugust 25, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader CVE-2026-78475 Fix available 6.1 MediumAugust 24, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 more Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit CVE-2026-78465 Fix available 7.0 HighAugust 24, 2026
• gnome epiphany Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host() CVE-2026-18487 Fix available 5.4 MediumAugust 6, 2026
• gnome gnome-remote-desktop, red hat enterprise linux 10, enterprise linux 10.0 extended update support +2 more +4 more Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service CVE-2026-18358 Fix available 7.5 HighJuly 31, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images CVE-2026-66759 Fix available 7.1 HighJuly 27, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images CVE-2026-66757 Fix available 5.5 MediumJuly 27, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 more Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images CVE-2026-66758 Fix available 7.8 HighJuly 27, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked() CVE-2026-66338 Fix available 5.4 MediumJuly 24, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until() CVE-2026-66337 6.5 MediumJuly 24, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels CVE-2026-66339 Fix available 6.5 MediumJuly 24, 2026
• Show olderLoading…